基于UCON_(ABC)的智能卡分析与应用  

Analysis and Application of UCON_(ABC)-based Smart Card

作　　者：胡善学[1] 胡永涛[2] 姚静晶[2] 周家晶[1] 

机构地区：[1]上海交通大学软件学院,上海200240 [2]公安部第三研究所信息网络安全公安部重点实验室,上海201204

出　　处：《计算机工程》2011年第11期167-169,共3页Computer Engineering

基　　金：国家"863"计划基金资助项目(2008AA01Z412)

摘　　要：在现有智能卡规范中,对于来自终端的访问缺少有效的安全访问控制管理,容易导致智能卡在使用过程中存在非法输入、重放攻击、旁路攻击、强制复位等安全风险。为此,对智能卡的应用过程进行分析,并对UCONABC访问控制模型的特点进行研究,提出一种基于UCONABC的智能卡访问控制管理方法。将基于UCONABC的访问控制管理子系统嵌入到智能卡内,把外部定义的访问控制策略写入卡内的策略库文件,从而灵活地控制外界访问,保护智能卡的安全应用。The current existing specifications of smart card lack effective security access control and management for the terminal access,and possibly cause some security risks in the use of smart card,including illegal input,replay attack,bypass attack,mandatory reset,and so on.In response to these security risks,this paper analyzes the application process of smart card,does some research on the feature of UCONABC access control model and gives a method of smart card access control management based on UCONABC.It embeds the subsystem of access control management into the smart card,and then writes the access control policy defined by external into the policy library file of the smart card,to realize effective access control flexibly,to ensure the secure application of the smart card.Results prove this method can be more secure to protect the real application of smart card.

关 键 词：智能卡 访问控制 使用控制模型 公钥基础设施 卡片操作系统 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]